Initial consultation
EN

Working safely with AI under the GDPR

A half-day session that helps everyone in your practice understand which files may be used in which tools.

Grey document folder and a stack of contracts beside a laptop on a desk.
Duration
Half a day
Participants
Up to 15 people
Level
Introductory, no prior knowledge required
Price
€750.00 Online flat fee

Three questions usually come up before booking: is the course for us, what does the half-day session cover and what will we be able to do afterwards?

  1. Who the course is for

    • The whole practice together, because critical uploads happen at individual workstations
    • No prior knowledge required
    • Particularly useful for people already using chat tools privately

    Why involve everyone?: An unknown policy prevents nothing. A person uploading a file makes the decision at that moment and needs to know what to check.

    The scope of the course: This is not legal advice. We practise recognising critical cases and asking the right questions. Contractual assessment remains with your legal adviser or data protection officer.

  2. What the course covers

    • What happens to an input. Where a file goes, who stores it, whether it is used for training and how to check. 45 minutes.
    • Sensitive data in your projects. Personal data, clients' trade secrets and third-party intellectual property in design documents. 45 minutes.
    • Your client contracts. Confidentiality clauses, usage rights and restrictions on sharing, explained using your actual contract templates. 45 minutes.
    • Practical exercise: identify critical inputs. We present everyday engineering cases and you make the decision. 90 minutes.
    • Policies your practice should establish. An open discussion resulting in a list of matters requiring a policy. 30 minutes.
  3. What you will be able to do

    • Assess an input before submitting it
    • Distinguish personal data, trade secrets and third-party intellectual property in project documents
    • Recognise when a client contract restricts use
    • Identify which tools your practice permits
    • Describe a critical case clearly enough for a data protection officer to assess it